Victim AV Services Barcelona experienced a ransomware attack by threat actor nova, resulting in the theft of 100 GB of critical data including resources, billing, customer information, plans, commercial data, factory data, archives, videos, pictures, and documents. The attackers left a readme file on the desktop with recovery instructions and contact details, impacting Spain.
Incident Details
- Victim: AV Services Barcelona
- Country: ES
- Actor: nova
- Source: http://novaxtychr6ohlc4zr5its73p6i7unpuhpwoodtzrg2y4w4seytatlid.onion/#
- Discovered: 2025-09-25 23:39:40.486718
- Published: 2025-09-25 23:39:06.746436
Information
- AV Services Barcelona specializes in comprehensive audiovisual services for events in Barcelona and Madrid, with over 15 years of experience.
- Their services include audiovisual production, hybrid events, streaming, videoconferencing, and equipment rental such as sound systems, LED screens, and lighting.
- The company is committed to providing tailored solutions for each event, emphasizing flexibility and agility.
- They serve corporate clients and are known for innovation and exceptional customer service.
- We have stolen 100 GB of data, including resources, billing, customer information, plans, commercial data, BCN and factory data, archives, videos, pictures, documents, and much more.
- A readme file is available on the desktop, providing a guide to recover the encrypted files, along with contact information for assistance.
Disclaimer: This post is based on public claims made by the ransomware group "nova". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.